General

  • Target

    6944aa67e3bf7ca060427d27c76218a0N.exe

  • Size

    154KB

  • Sample

    240801-mj3z6swdkq

  • MD5

    6944aa67e3bf7ca060427d27c76218a0

  • SHA1

    618d2f3daa4a2c9d49be71e1fef603580eac0c12

  • SHA256

    45bd0eaf853f44671374aa0d6a272b1988b9ba679b793f6dc8c9875e0e873c0b

  • SHA512

    ed795a4a6d95c6672addebe589d6734267a03f1e47ff5934df235acb26c0bfbaec86ffa6f52e345d19123c99682228e8f45f82bac73ae4a686319927c0c7508b

  • SSDEEP

    3072:3Bf2/IeLRScFgNhGolkdqRnxdLfubQYJN7dkApw2a695AQnS:RbPNhGoioRGFXlw2atQS

Score
10/10

Malware Config

Extracted

Family

strela

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      6944aa67e3bf7ca060427d27c76218a0N.exe

    • Size

      154KB

    • MD5

      6944aa67e3bf7ca060427d27c76218a0

    • SHA1

      618d2f3daa4a2c9d49be71e1fef603580eac0c12

    • SHA256

      45bd0eaf853f44671374aa0d6a272b1988b9ba679b793f6dc8c9875e0e873c0b

    • SHA512

      ed795a4a6d95c6672addebe589d6734267a03f1e47ff5934df235acb26c0bfbaec86ffa6f52e345d19123c99682228e8f45f82bac73ae4a686319927c0c7508b

    • SSDEEP

      3072:3Bf2/IeLRScFgNhGolkdqRnxdLfubQYJN7dkApw2a695AQnS:RbPNhGoioRGFXlw2atQS

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks